General

  • Target

    fileb09f38d4b12a76c78e651e92583ea94f219958crypted.exe

  • Size

    421KB

  • Sample

    240914-kl49xawbpb

  • MD5

    13c7803aceca3b2f651fb667dc2c0797

  • SHA1

    90be3df29854ffc2782edff3c69aceb5788dde50

  • SHA256

    c8064480cc96c9649ce7bfd61d97cc43a8604fe100a5e2c31c3dc9610f06e791

  • SHA512

    9706b95dd98fe0f0844f384105b6c81863f8f50b616511e09cca93686888304ff284c3f3a7cbf05ca9e610364d46d04c373d1307877c4aa65eb00facac9af176

  • SSDEEP

    12288:qOvRpTrdBipxJ/H2M3oouUbx7briAB4Ho+XKI9EQaRLckBBdKHOGLWKwXyKK:Fv/TLipv/WXopF

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://horsedwollfedrwos.shop/api

https://patternapplauderw.shop/api

https://understanndtytonyguw.shop/api

https://considerrycurrentyws.shop/api

https://messtimetabledkolvk.shop/api

https://detailbaconroollyws.shop/api

https://deprivedrinkyfaiir.shop/api

https://relaxtionflouwerwi.shop/api

Targets

    • Target

      fileb09f38d4b12a76c78e651e92583ea94f219958crypted.exe

    • Size

      421KB

    • MD5

      13c7803aceca3b2f651fb667dc2c0797

    • SHA1

      90be3df29854ffc2782edff3c69aceb5788dde50

    • SHA256

      c8064480cc96c9649ce7bfd61d97cc43a8604fe100a5e2c31c3dc9610f06e791

    • SHA512

      9706b95dd98fe0f0844f384105b6c81863f8f50b616511e09cca93686888304ff284c3f3a7cbf05ca9e610364d46d04c373d1307877c4aa65eb00facac9af176

    • SSDEEP

      12288:qOvRpTrdBipxJ/H2M3oouUbx7briAB4Ho+XKI9EQaRLckBBdKHOGLWKwXyKK:Fv/TLipv/WXopF

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks